Presenter – M.U. Maska , Director of Cybersecurity, Office of the National Security Adviser, Nigeria. u.maska@cert.gov.ng, info@cert.gov.ng, +234-803-586-6773. Regional Cybersecurity Forum for Africa and Arab States, Tunis 2009. ` ` ` ` ` ` ` ` Introduction Cybersecurity Issues Steps Taken by Nigerian Government Objectives of National Cybersecurity Initiative(NCI) Nigerian Cybercrime Working Group (NCWG) Directorate of Cybersecurity (DOC) Activities of DOC Challenges ` ` ` ` ` Nigeria has population of over 150 Million. Youth mostly Educated to High school Constitute over 40% of the Population. Key Economic Activities are in areas Oil & Gas, Banking, Agriculture and Manufacturing industries. It is the Economic Hub of the West African sub region. Advent of Internet in Nigeria was in the mid 90s, then used mostly by Multinational firms for Legitimate Business. Service was only available through the Government owned Nigerian Telecommunication Company. ` ` ` ` Subscription was very Expensive and usage limited. During the Deregulation of Telecom Sector of late 1990s, few more private ISPs were licensed and access became less expensive. With the proliferation of ISPs and Cybercafés in the country Fraudsters started using the Internet, instead of the Regular Mails and Fax. Government became Alarmed with the Misuse of Cyberspace by the Fraudsters. ` ` ` ` ` Website Cloning( e.g. Banks, Telecomms etc.) Phishing(e.g. Username, Password, Card Info) E-commerce fraud( e.g in Ebay Transaction) Credit card fraud(e.g Card scheming, Generating Card Info etc.) Advance Fee Fraud( a.k.a 419) ◦ ◦ ◦ ◦ ◦ Re-shipping fraud Romance fraud Inheritance fraud Lottery scam Crude oil sales scam etc. ` ` ` In 2003 The President of Nigeria set up a Committee to Investigate the Activities of these Fraudsters on Cyberspace. Also in 2003 Government set up Economic and Financial Crimes Commission (EFCC) to Tackle the menace of Corruption, Advance Fee Fraud and Money laundering. The Presidential Committee came-up with National Cybersecurity Initiative (NCI) which has the following objectives : ` ` ` Public Enlightenment of the Nigerian Populace on the nature and danger Cybercrime. Criminalization through new Legislation of all on-line vices. Institutional Capacity Building across Law Enforcement Agencies to extend Statutory Functions on Cybercrime related issues. ` ` ` Establishment of Legal and Technical Framework to Secure Computer Systems and Networks, and Protect Critical Information Infrastructure for the country. Creation of a platform for public-private stakeholders collaboration to set Guidelines and Standards for Cybersecurity in Nigeria. Building International Law Enforcement Cooperation and Collaboration with other Agencies Worldwide to enable Nigeria tackle the menace of Cybercrime. ` ` ` In 2004 Government then set up the Nigeria Cybercrime Working Group(NCWG) to realize the Objectives of NCI . NCWG team was made up of Government officials ICT related Ministries and Departments as well as Law Enforcement Agencies. It was mandated to implement the NCI Objectives within two years. ` ` ` ` NCWG conducted Public Enlightment on Cybercrime successfully among Public and Private Institutions in Nigeria. Drafted Computer Security and Critical Information Infrastructure Protection Bill. Nigeria through the EFCC joined the G8 24/7 Network of High Tech Crime Group (US Dept of Justice ). A number of cases on Cybercrime are now being Investigated and Prosecuted in Nigeria ( e.g. Operation Cyberstorm ) ` ` ` In 2006 Directorate of Cybersecurity under the Office of the National Security Adviser was created to sustain the Good work of NCWG. DOC is presently the apex body that Coordinates the Activities of Cybersecurity in Nigeria. Its Mandate is the implementation of the NCI objectives. ` ` ` Develop a framework for National Computer Emergency Response Team (CERT), www.cert.gov.ng . Establishing collaboration with CERTs around the world. Establishing a National Computer Forensic Laboratory and Coordinating the training and utilization of the facility by all Law Enforcement Agencies in Nigeria. ` Public awareness campaign ◦ NGO’s ◦ National Assembly ◦ Law enforcement agencies ` Sponsoring passage of ‘The computer Security and Critical Information Infrastructure Protection Bill’ in the National Assembly. ` ` ` ` ` Cybercrimes are transnational and perpetrators continue to utilize legislative loopholes, intelligence gaps and jurisdictional issues to their advantage. Passage of the Bill and Amendment of Nigerian Evidence Act. Acquisition of modern technological tools to Prevent, Monitor and Investigate Cybercrime which is dynamic. Near absence of single Internet Gateway. Training. Thank you for listening